Configuring Private Endpoints
Azure Private Link enables you to access Platform as a Service (PaaS) services such as Azure Storage and SQL databases, and Azure-hosted services over a private endpoint in your own VNet.
Much like service endpoints, private endpoints allow traffic between a VNet and a service to travel through the Microsoft backbone network. This way, exposing your service over the internet is no longer required.
A key difference between service endpoints and private endpoints is that service endpoints connect to Azure/Microsoft services over their backbone while the PaaS resources are still outside of the VNet and require additional integration to interact with the VNet. To be routed as such, a network interface will be attached to the PaaS service as private endpoints, and this will allow the resources to interact directly with your VNet. It is important to understand that private endpoints keep all the traffic within your VNet.
